
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
File: LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft (raw, json)
Hash identifier: b5HWv23edO9AYEEj0TK9StKP0lFUbd30tmOT4WDAkg8=
Subject key identifier: 76:21:28:A5:34:93:58:02:6D:CC:B1:73:5B:39:F2:54:71:A4:64:BF
Authority key identifier: 2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
Certificate issuer: /CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Certificate serial: 019A16173B5D351FDD188E10C923BA4F63B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
Manifest number: 01EB
Signing time: Fri 24 Oct 2025 12:00:12 +0000
Manifest this update: Fri 24 Oct 2025 12:00:12 +0000
Manifest next update: Sat 25 Oct 2025 12:00:12 +0000
Files and hashes: 1: 1KnXeZeK2jaZLc215sUulykWcXQ.roa (hash: MfFGqElV/jvH/sstkJrBdiD+qKnk4Q33yEmCF2id+a0=)
2: 65LOTWbYKO8WgYG9BzJDe2-WQYw.roa (hash: r/wzovoY8RroYrCDVvJnayhwU+roMgwKwl/4ua4F6NI=)
3: HLToq3nf5OApFMJ_DLN91h1Fnjo.roa (hash: 1jDZSo5xWA1TudXcCIeUFspwv8s1DeU3J7ObH+JPAu8=)
4: LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl (hash: /xo8/0piAf0eWgZFRjCe8v7qAntb88PtKT3GYGWEODE=)
5: m150QYtpxXBTiSlnK92QRVRD5zo.roa (hash: ebTEJw9nejGCIduesrnIYj5ZZrinqeTVbBAfSnKeowc=)
6: mgJ3Sc6KxuSRQNVYzl0KbaYNlDY.roa (hash: +UkcMaXx37s6HLo3vytB7ItB+h6lkh9Nk4bNEQS1Dtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:17:3b:5d:35:1f:dd:18:8e:10:c9:23:ba:4f:63:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca37da970c466457583bbe02b2a0e72fbdc6328
Validity
Not Before: Oct 24 12:00:12 2025 GMT
Not After : Oct 25 12:00:12 2025 GMT
Subject: CN=762128a5349358026dccb1735b39f25471a464bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8f:29:d6:e5:85:20:d8:47:90:87:a8:ac:0d:
b5:ad:c6:47:07:c8:12:11:29:2f:a3:27:b0:6e:cc:
e2:6a:12:d6:e0:e0:d7:d9:19:f5:d2:30:ce:38:3d:
3a:ca:ad:ba:8f:79:06:db:8c:b0:36:23:01:65:9e:
0f:43:d5:dd:b6:be:89:eb:86:20:f6:e9:f0:e3:46:
7b:f0:68:20:8a:6b:f7:8a:8e:d2:3e:39:4e:4e:5f:
1b:78:88:d9:c3:8e:8e:e0:b1:24:0b:2b:35:69:b8:
7a:3b:2d:ef:98:0f:d4:8e:e0:eb:6c:89:3c:58:35:
df:24:f1:ba:be:ea:eb:58:22:44:f0:79:91:f1:99:
c4:7e:28:de:52:84:b3:5d:8e:c0:67:8a:45:e8:4a:
90:fb:b5:a7:70:c5:6e:69:29:6e:94:8c:e5:82:64:
aa:b2:aa:06:4d:53:e5:13:66:01:57:cf:ce:9a:ea:
cc:39:80:47:44:13:b3:40:ab:9e:a4:44:7a:15:df:
79:dc:fb:e4:8e:8b:8c:9b:40:10:06:a5:66:a7:22:
e4:0d:3f:34:90:83:f7:5d:d3:b7:ba:ad:c8:67:0a:
5a:21:91:ae:2b:6d:2f:43:c8:39:26:d6:5e:90:4c:
70:df:33:50:0c:8b:cd:e3:9b:0d:e9:6a:79:95:a8:
0e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:21:28:A5:34:93:58:02:6D:CC:B1:73:5B:39:F2:54:71:A4:64:BF
X509v3 Authority Key Identifier:
keyid:2C:A3:7D:A9:70:C4:66:45:75:83:BB:E0:2B:2A:0E:72:FB:DC:63:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKN9qXDEZkV1g7vgKyoOcvvcYyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2492fd-6e37-4582-84e8-8ca25f488ebf/1/LKN9qXDEZkV1g7vgKyoOcvvcYyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ec:67:e8:a0:fc:03:b7:f9:2c:aa:b7:1a:16:00:b2:79:95:
8d:7b:58:0e:e9:f0:da:6c:d8:a3:1a:5a:0d:c7:69:b1:29:51:
3d:66:c6:09:eb:d3:40:34:e8:1f:a8:73:c2:20:86:dc:bb:f7:
08:46:02:dc:e0:18:b3:54:fe:72:0e:ef:8e:2a:89:6b:45:4d:
8c:69:f2:77:e4:e7:84:3d:5b:4a:1c:7d:69:56:bc:8b:7c:cb:
32:d5:62:1c:d1:db:56:f9:23:79:f5:d4:77:45:27:c4:f5:41:
8b:96:75:a4:df:05:34:cd:74:c5:cf:8c:3d:63:6d:a2:ed:6b:
27:0a:0d:88:03:5b:eb:e7:45:92:c8:72:a4:52:7d:c1:9c:50:
b9:b6:82:7a:53:86:a5:5a:79:f1:e9:39:8d:04:4b:84:ca:fe:
02:e8:69:63:8b:e8:17:44:17:21:2b:c1:61:12:6b:89:66:0a:
e6:a8:2a:6f:56:bd:e4:db:d2:25:fb:87:41:33:fa:82:5e:5d:
ed:f8:ce:e0:9e:84:07:62:60:6e:ec:c5:c5:a1:1e:29:fc:87:
77:c7:92:f7:08:fb:8e:69:21:8e:b3:05:8f:85:11:f2:88:e6:
03:18:e9:50:e2:4e:b2:d3:5b:c2:7f:7d:c1:09:1d:ce:75:bf:
84:ab:65:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 13:54:09 2025 by rpki-client